--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T02:45:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T02:45:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T02:45:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T02:45:32Z" name: csr-p7tdp resourceVersion: "5904" uid: 0726d269-b68b-4f06-bce5-d4ccc876b3d3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=802a6cc2bed8950383d37da7566b1058cb275f3e54c920f4caffb2e412f39008 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T02:45:32Z" lastUpdateTime: "2026-09-11T02:45:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved